Cloud Security & Compliance Flashcards

In Informatica Cloud, which compliance certification demonstrates that the platform's security controls meet the requirements for processing US federal government data?

Answer: FedRAMP

FedRAMP (Federal Risk and Authorization Management Program) is the US government framework certifying that cloud services meet federal security standards.

What is the effect of enabling the 'Secure Agent proxy' setting in IICS when the corporate network routes all outbound traffic through an HTTP proxy?

Answer: The Secure Agent tunnels traffic through the proxy to reach IICS endpoints

Configuring proxy settings in the Secure Agent allows it to route its outbound HTTPS connections through the corporate proxy server to reach IICS.

Which Informatica Cloud Data Integration feature helps identify and remediate columns that contain sensitive data patterns like Social Security Numbers across multiple source systems?

Answer: Data profiling with pattern-based classification

Data profiling with pattern matching can detect columns containing structured sensitive data like SSNs by scanning actual data values against regex patterns.

Under PCI DSS, cardholder data transmitted through Informatica Cloud pipelines must be protected in transit. Which of the following configurations satisfies this requirement?

Answer: Enabling TLS on both source and target connections with valid certificates

PCI DSS Requirement 4 mandates that cardholder data be encrypted across all network segments, requiring TLS on both the ingress (source) and egress (target) sides of a mapping.

An administrator wants to prevent Informatica Cloud users from exporting connection credentials or viewing connection passwords. Which access control approach achieves this?

Answer: Granting users connection 'Use' privilege without 'Edit' or 'Admin' privilege

The 'Use' privilege allows users to select a connection in mappings without being able to view or modify the underlying credentials.

When Informatica Cloud processes data subject to CCPA, which data management action must the platform be able to support for California residents upon request?

Answer: Opt-out of personal data sale and right to deletion

CCPA grants California residents the right to opt out of the sale of their personal information and the right to request deletion of their data.

In IICS, which object type should be used to pass encrypted runtime values such as API keys into a mapping without hardcoding them in the mapping configuration?

Answer: Secure parameters in parameter files or runtime parameters

Secure parameters in IICS parameter files allow sensitive values to be passed at runtime and stored in encrypted form, keeping secrets out of mapping definitions.